CA Gateway and the Entrust Proxy for Microsoft CA communicate with HTTP over SSL and mutual authentication. Thus, two SSL certificates are required:

• A server SSL certificate for the Entrust Proxy for Microsoft CA.
• A client authentication certificate for CA Gateway.

You can obtain both SSL certificates from any CA. Those steps are outside the scope of this document.